<html><head><meta http-equiv="Content-Type" content="text/html charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">Rescued from the spam bucket. Please remember to subscribe to the mailing list before posting to it.<br class=""><div><br class=""><div class=""><div class=""><span class="" style="font-family: -webkit-system-font, 'Helvetica Neue', Helvetica, sans-serif; color: rgb(127, 127, 127);"><b class="">From: </b></span><span class="" style="font-family: -webkit-system-font, 'Helvetica Neue', Helvetica, sans-serif;">Julian Yang <<a href="mailto:juliany@vmware.com" class="">juliany@vmware.com</a>></span></div><div class=""><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px;" class=""><span style="font-family: -webkit-system-font, Helvetica Neue, Helvetica, sans-serif; color:rgba(127, 127, 127, 1.0);" class=""><b class="">Subject: </b></span><span style="font-family: -webkit-system-font, Helvetica Neue, Helvetica, sans-serif;" class=""><b class="">XFRM policy with mark</b><br class=""></span></div><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px;" class=""><span style="font-family: -webkit-system-font, Helvetica Neue, Helvetica, sans-serif; color:rgba(127, 127, 127, 1.0);" class=""><b class="">Date: </b></span><span style="font-family: -webkit-system-font, Helvetica Neue, Helvetica, sans-serif;" class="">September 29, 2015 at 5:58:30 PM EDT<br class=""></span></div><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px;" class=""><span style="font-family: -webkit-system-font, Helvetica Neue, Helvetica, sans-serif; color:rgba(127, 127, 127, 1.0);" class=""><b class="">To: </b></span><span style="font-family: -webkit-system-font, Helvetica Neue, Helvetica, sans-serif;" class="">"<a href="mailto:users@lists.openswan.org" class="">users@lists.openswan.org</a>" <<a href="mailto:users@lists.openswan.org" class="">users@lists.openswan.org</a>><br class=""></span></div><br class=""><br class="">
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1" class="">
<div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; font-size: 14px; font-family: Calibri, sans-serif;" class="">
<div class="">Dear OpenSwan users,</div>
<div class=""><br class="">
</div>
<div class=""><br class="">
</div>
<div class=""> I am working on a project with IPSec and have a question regarding using the “mark” field in security policy. </div>
<div class=""><br class="">
</div>
<div class="">If I specify the “Mark” value in the security policy, is the Mark value used as part of the lookup key when IPSec looks up SPD? I.e. If I add two policies with identical seclectors but different Mark values, will I get two separate security policies
in the SPD? </div>
<div class=""><br class="">
</div>
<div class=""><br class="">
</div>
<div class="">Second question: </div>
<div class=""><br class="">
</div>
<div class=""> Btw I also see an error when trying to specify mark in the cli command: can anybody shine some light on it too? </div>
<div class=""><br class="">
</div>
<div class="">>> ip xfrm policy add src 1.1.1.1/20 dst 2.2.2.2/20 dir fwd tmpl src 192.1.1.1 dst 192.2.2.2 proto esp mode tunnel mark 7 mask 0xffff</div>
>> Error: duplicate "unknown": "mark" is the second value.
<div class=""><br class="">
</div>
<div class=""><br class="">
</div>
<div class="">Thanks a lot for your help!</div>
<div class=""><br class="">
</div>
<div class="">Julian </div>
<div class=""><br class="">
</div>
<div class=""><br class="">
</div>
<div class=""><br class="">
</div>
</div>
<br class=""><br class=""></div></div></div><br class=""></body></html>